Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
File:                     y9QcwSHgy2CjqY2_crpNvWPuvp8.mft (raw, json)
Hash identifier:          O/wxW3JaH1EMYiQ5Z5RgH1X5/N4igAklf54VvLZv2qE=
Subject key identifier:   81:83:54:F8:1A:56:4C:69:55:8C:A0:71:9E:13:61:69:B3:AE:B9:78
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Certificate issuer:       /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial:       0199FBEBA769E0F0ABCB14CBF2296F3AEFF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
Manifest number:          0EEF
Signing time:             Sun 19 Oct 2025 10:02:28 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:28 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:28 +0000
Files and hashes:         1: NH3eFCO2z6iD8tqKH5j3jRrAVkU.roa (hash: ZXJCvBm8BnALLLtPx8hXRUmbjYU517MofZBHTTPZwAM=)
                          2: drCHGsFCH9gtO7i946SJRwJLVRQ.roa (hash: aSAJUF+FTsSFxUy1oN30ReyG2kXTHEsA0T+WTdOGVN8=)
                          3: r7MeXBD4h2cagNO6Vs8Qg7deiiI.roa (hash: ojLWPczZy5cMPxT49AEzAQruFXc/LPul28QPHpbW6P8=)
                          4: y9QcwSHgy2CjqY2_crpNvWPuvp8.crl (hash: S9XmB4cbtLTwuXcoSL4SSyZCRpqXPrw9KLfCYhxZzn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:a7:69:e0:f0:ab:cb:14:cb:f2:29:6f:3a:ef:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
        Validity
            Not Before: Oct 19 10:02:28 2025 GMT
            Not After : Oct 20 10:02:28 2025 GMT
        Subject: CN=818354f81a564c69558ca0719e136169b3aeb978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5e:30:d1:6d:43:39:e5:8c:f0:62:1d:00:a6:
                    2a:89:a4:ba:bb:dd:e8:98:3d:e8:c3:ca:63:1b:f9:
                    12:65:de:6e:56:44:c6:f7:0a:0e:57:fc:fc:6f:41:
                    a5:46:11:a6:91:de:e5:0f:b3:f9:0d:a7:a4:b4:1f:
                    bb:04:83:a0:59:b1:53:fc:e6:ca:95:9e:64:8c:5b:
                    cf:62:85:f3:39:c1:0a:ba:ce:d9:f1:54:b7:ad:8f:
                    71:10:c6:56:b6:2d:a3:25:33:fd:c9:02:63:af:75:
                    29:f1:01:d5:c0:a2:4f:47:96:99:b1:19:cc:2c:a8:
                    aa:46:39:0f:d3:16:05:86:c2:52:16:e7:4d:58:59:
                    eb:4d:43:3e:22:42:a3:f0:ef:b2:cd:be:08:e8:af:
                    fd:41:79:9f:6f:f0:77:7e:0f:e2:b0:61:f4:b1:dc:
                    fd:00:c8:9c:f3:bb:93:a1:ec:e7:4a:ef:24:39:86:
                    61:55:84:13:06:7c:2c:03:f1:65:87:f2:a1:73:60:
                    5c:1a:11:3f:10:d1:87:83:95:2f:94:12:03:76:e4:
                    80:26:d2:b3:1d:82:e5:d4:e9:d9:ec:b4:11:35:42:
                    43:28:36:c6:f6:38:a6:bb:61:1e:3c:5a:cd:23:d5:
                    2f:30:cb:9f:c5:bc:45:8f:c7:9a:3e:25:0b:89:3b:
                    02:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:83:54:F8:1A:56:4C:69:55:8C:A0:71:9E:13:61:69:B3:AE:B9:78
            X509v3 Authority Key Identifier:
                keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e6:2c:d0:f3:3f:b8:60:39:1d:97:8a:ac:36:9e:3f:b6:73:
         ca:50:66:23:8c:83:56:ff:4e:e9:d7:4c:00:3b:67:aa:32:87:
         d9:f0:1c:f4:90:37:d6:71:b7:e1:61:af:28:38:f3:ee:f0:da:
         24:b5:e9:83:31:00:a1:3a:7d:b0:0d:51:41:bd:5c:f3:5d:ae:
         30:41:67:6c:3b:38:bc:4a:b9:10:08:f8:06:9b:7b:6d:ab:fd:
         2c:0d:85:ee:c0:26:c0:e1:05:c1:58:71:dd:b1:7a:84:96:8a:
         f5:0e:5e:b7:df:5e:d8:f1:8f:36:7f:a7:a8:35:cd:4d:6e:92:
         5d:65:8a:3b:47:fa:b3:53:d3:e8:ed:e3:3a:66:8f:93:98:e1:
         08:42:1e:a6:74:ae:b6:cc:87:02:8e:58:08:61:c6:61:0c:a9:
         c8:0d:ae:e7:86:d3:40:04:69:66:d4:72:a5:87:75:fc:1a:4e:
         fe:d5:49:5c:01:44:f8:42:b6:21:60:44:20:bb:a1:36:80:ac:
         ab:9e:7a:82:2f:34:96:76:38:3e:00:cf:4a:a4:6a:15:cb:56:
         aa:af:c5:fd:a1:44:64:8a:87:96:5a:7d:bf:1c:49:73:19:f7:
         c9:09:25:64:9e:e5:7d:16:4d:dc:14:06:2f:cc:a6:20:74:67:
         e3:db:00:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:08 2025 by rpki-client